One effective way for computer security incident response teams or other types of incident management functions to get started and to improve their performance is to read about what other similar teams have done. From time to time, we publish case studies of national information security teams to assist in this process. CSIRTs can get started and improve their performance by reading about what other similar teams have done in similar situations.

Contact us if you have questions about developing a CSIRT or if you need additional information about our work with CSIRTs.

Learn How to Create a CSIRT

Creating a Computer Security Incident Response Team is a one-day course that describes the key issues and decisions that managers and project leaders must address when establishing a CSIRT.